Filter
Top Products
23-42
User Guide for Cisco Security Manager 4.4
OL-28826-01
Chapter 23 Configuring Network Address Translation
NAT Policies on Security Devices
Field Reference
Table 23-15 Network/Host Dialog Box NAT Tab
Element Description
Add Automatic Address
Translation NAT Rule
If checked, a network address translation (NAT) rule, as defined here,
will be applied to the device specified in the Translated By field. The
rule will appear in the Network Object NAT Rule section of the
Translation Rules table for that device (see Translation Rules: ASA
8.3+, page 23-32).
Translated By The device on which you are configuring the NAT rule. Click Select to
select the device from a list. The list is filtered to show only ASA 8.3+
devices.
Source Interface The name of the interface on which a packet may originate; this is the
“real” interface. Defaults to any, which represents all interfaces.
Destination Interface The name of the interface on which a packet may terminate; this is the
“mapped” interface. Defaults to any, which represents all interfaces.
Type The type of translation rule you are creating:
• Static – Enables static assignment of real addresses to mapped
addresses.
• PAT (Hide) – Enables dynamic assignment of multiple local
addresses to a single global IP address and a unique port number.
• Dynamic NAT and PAT – Enables dynamic assignment of real
addresses to mapped addresses, and real ports to mapped ports.
Source Translation
Original value Shows the address configured on the General tab of this dialog box.
This is the source address the NAT rule will translate. If it is a range or
network, all addresses in the range or network will be translated.
Translated Source
Use Address
Use Interface (available only
for Static and PAT)
Whether the translation is based on an address or an interface on the
device:
• Use Address—Translate the original address using the specified
address or network/host object. Enter the address or object name in
the Address field, or click Select to select the object from a list.
• Use Interface – Translate the original address based on the
interface specified in the Destination Interface field.
Note The Use Interface options are available only when either Static
or PAT (Hide) is chosen as the Type.